OpenStack Security Advisory

  1. Bug #1349491
  2. Comment #18

Comment 18 for bug 1349491

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to horizon (stable/icehouse)

Reviewed: https://review.openstack.org/115311
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=ba908ae88d5925f4f6783eb234cc4ea95017472b
Submitter: Jenkins
Branch: stable/icehouse

commit ba908ae88d5925f4f6783eb234cc4ea95017472b
Author: Julie Pichon <email address hidden>
Date: Tue Jul 29 16:17:44 2014 +0100

    Fix XSS issue with the unordered_list filter

    When using the unordered_list filter in a Horizon table (as opposed to
    a template directly), autoescaping is not set by default and the input
    wasn't sanitised.

    Closes-Bug: #1349491
    Change-Id: Id82eefe48ccb17a158751ec65d24f3ac779380ec